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DRAFT APPLICATION 

SYSTEM AND METHOD FOR ADDRESS BOOK CUSTOMIZATION 
FOR SHARED EMESSAGING 

FIELD OF THE INVENTION 

The present invention relates to a system and method for providing access to an address 

directory in a hosted emessaging environment, and more particularly to limiting access to 

segments of the directory when the emessaging services are provided to a plurality of third 

parties. 

BACKGROUND OF THE INVENTION 

As is well known, Lotus Notes is a groupware type of software application which allows 
parties to manage and access information across a number of different computing platforms. An 
application employed in this type of groupware may consist of several individual database 
designs that work together to perform a specific task. A typical Lotus Notes application may 
consist of a set of design elements that specify, among other things, the types of documents in 
the database, as well as the way that the documents can be indexed and viewed. 

A database employable in the Notes environment may be resident on a networked server 
and may be accessible by other networked computers running compatible applications. In 
configurations where this type of access is provided, a Domino server program may be resident 
on the networked server. The Domino server program includes the logic to respond to incoming 
request from another computer and provide the requested information, as well as performing 
numerous other tasks. 
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One function which may be provided by a Domino server is the hosting of e-mail 
services, which includes the accessing and use to email information stored in a database. The 
networked system described above may be further configured to allow client's computers to 
access the database through various web based functions, such as Internet web-browsing. The 
5 Domino hosting configuration may also be established such that all of the capabilities of a 
groupware product, such as Lotus Notes, may be employed by one or more entities who do not 
wish to build or otherwise maintain an internal infrastructure which includes the requisite 
hardware and software. 

1 0 SUMMARY OF THE INVENTION 

The inventors have recognized that in situations where hosting of database services is 
provided for a plurality of third parties in a single domain, certain security issues may exist, 
wherein each of the third parties may have access to the other parties' information. As such, the 
inventors have configured a centralized hosting domain which provides security for information 

1 5 stored therein, such that selected information associated with a particular party is not accessible 
by other parties who do not have the appropriate authorization. 

Described herein is a method for configuring a hosted groupware solution, such as Lotus 
Notes/Domino Hosting, so as to provide the certain security features. According to the method, 
each entry in a shared directory included a form which may further include an additional field. 

20 The field is configured so that additional descriptive information may be entered. These fields 
may be configured such that they are only accessible by parties with the necessary authorization, 
such as an administrator or one who has been granted editing rights. 
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In one configuration of the invention, each field is provided with a formula which creates 
a wild card entry for hierarchal information associated with a particular entity. In one example, a 
user entry may further include hierarchal information, such as company, division, location, etc. 
employed to identify a user. 

Each entry is stored in the directory may be associated with either a person or a group. 
When employing the formulas in the additional field, the user name field of each person 
document may contain a name with the user's company hierarchy. In a situation where a group 
entry is employed, the owner field (list owner) of each group document may contain the name 
with the user's company hierarchy. 

As part of the method described herein, the directory may be configured with at least one 
view which is configured so as to only to be presented to those parties with administration and/or 
editing rights. In the Lotus notes environment, this view of information in the directory is 
commonly known as "$PeopleGroupsFlat". As part of limiting access to this particular view, as 
well as any mail-in or server documents from users, a duplicate view is created and an alias is 
provided for this duplicate view which refers back to the original view. Parties accessing the 
directory over the data network are provided access this duplicate view, with modified selection 
criteria. 

When an entity accesses the hosted environment described herein, an entry for the entity 
making a query is identified and retrieved fi"om the directory. As part of this directory access, 
identification information as well as access privileges are read from the entry. As was described 
above, each entry in the directory now includes a wild card entry which identifies the entity by 
hierarchal information. As was also stated above, access privileges to the first view of the 



directory are restricted, and as such, the entity accessing the directory would be denied access to 
that view, 

A search may then be performed to locate views with the same alias as the first view. 
The duplicate view includes such an alias and a build is then performed for the view using the 
5 selection criteria of the duplicate view. The selection criteria limit the build to just those entries 
which include the same hierarchal information as the entity which is accessing the directory. 
The view may then be built and displayed in a web page format. . 

The system described herein may be configured to comprise a network interface which 
receives and process queries fi-om third parties with authorization to access the directory 

10 included therein. The directory is configured to include entries which contain identification 
information for entities employing the system. In the configuration of the system where 
emessaging services are provided, the entries may include email addresses in addition to the 
other identification information. Also included with each entry is at least one field within which 
hierarchal information for the entity may be entered. The at least one field also include a 

1 5 formula which provides for the creation of a wild card entry which allows that particular entry to 
be identified by the added hierarchal information. 

The interface is further configured to provide one or mores views of the information in 
the directory. The interface may limit access to one of the views so as to protect certain types of 
information. Selection criteria may be established for at least one other view such that such that 

20 when initiated the view will include entries in the directory which include the same hierarchal 
information as the entry for the entity accessing the system. The interface may be still further 
configured to present this retrieved information in a newly built web page. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 discloses a system architecture within which the system described herein operates. 
Fig 2 discloses a block diagram which describes views provided when a party is provided 
access to the directory. 

5 Fig. 3 discloses an example of a screen display which includes the person form. 

Fig. 4 discloses an example of a screen display which includes the group form. 
Fig. 5 discloses a screen display employable for setting the selection criteria for the copy 
of the address directory. 

Fig. 6 discloses a screen displays employable to view information in the address directory 
1 0 with regards to a person or group. 

Fig. 7 discloses a flow chart which describes the operations of the system with regards to 
providing access to information in the directory. 



p DETAILED DESCRIPTION 

H 15 Disclosed in Fig. 1 is a system architecture within which the system and method 

Q described herein may operate. At a general level, the system described in Fig. 1 is a networked 

system, which provides for the interaction between clients machines 12 connected to a data 
network and at least one centrally located network server 16. To provide for communications 
between the components of the system, groupware applications may be resident on the server 16 
20 and possibly on each of the client machines. One application which may be employed in this 
configuration is Lotus Notes which allows for sharing of information stored on the server 16 
across many different types of computing platform. In the configuration shown herein, the 
system is specifically configured for providing emessaging (i.e., e-mail, wherein parties may 
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access a common directory over the data network 14). As part of the system described herein, 
the data network 14 may comprise such well-known data networks as the Internet, a local area 
network (LAN), and/or wide area network (WAN). 

The client machine 12 may comprise a personal computer type device connectable to the 
data network. Resident on each client machine may be one or more applications which provide 
for interactive, Window based access to databases and files which are local to the client's 
computer, as well as to shared databases accessible over the data network. In a Notes 
environment where connections are establishable to a Domino base server, a web-browser 
resident on the client machine may be employable to access and retrieve such information. 

The server 16 may comprise any type of network server currently known which employs 
a well-known computing platform, such as NT or Unix. The server may include applications 
such as Domino Server Tasks 18. This application supports connections between client 
machines and the server, and also manages a set of server tasks which are programmed to either 
perform schedule driven database chores, such as routing messages to mailboxes and updating 
user accounts, or connect the various type of clients, for example. Notes and/or Web-browser, to 
the server. Also resident on the server is the notes object services (NOS) 18. The NOS is a set 
of portable C/C++ functions that create and access information in database and files, compile and 
interpret formulas and scripts, and interface to the operating system services in a consistent, 
portable way. 

Also in connection with server 16 is directory 22. In the configuration of the invention 
showed in Fig. 1, this directory 22 is a shared database accessible by parties with authorized 
access to server 16. The Domino server program includes logic which in response to incoming 
requests from other computers, provides access to the database. Because the Dominos server 
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programs runs only on server computers, only databases that are on Dominos server computers 
are read. 

In the configuration of the invention shown in Fig, 1, the server 16 along with directory 
22 are configured to provide hosted emessaging for a plurality of third parties. The directory 
includes information about persons and groups which is employable for creating, transmitting, 
and receiving e-mail messages. Each person and/or group may include its own entry in the 
database, and each entry may include a person's name, company, location, as well as e-mail 
address. 

Disclosed in Fig. 2 is a diagram which provides some illustration with regards to the 
operation of the system described herein. Included in the directory 22 of Fig. 1 is a Domino 
public address book 32 within which the entries for the people and groups are stored. When an 
entity at a client machine wishes to employ the emessaging system described herein, they may 
establish a connection with the server 16 in order access the information in the directory. The 
client machine may employ a groupware application resident upon the machine in order to 
establish the connection, or in the configuration where a Domino server is employed, this 
connection may be established using a web browser. 

When a client machine accesses the Domino public address book, a view is built which 
includes a listing of the entries in the directory in a predetermined format. In the Lotus Notes 
environment they are built as a view which is typically known as ($PeopleGroupsFlat). An 
example of $PeopleGroupsFlat is shown in screen display of 34. In the situation where parties 
are accessing over a data network using a web-browser, $PeopleGroupsFlat may be built in 
HTML format and displayed on user interface 30. 
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Many organizations today provide network hosting for e-mail services to those 
organizations or entities who do not wish to purchase or otherwise acquire the necessary 
computing assets for providing the services at their own locations. As part of this hosting 
service, all the above described functionality is provided on a networked server which is 
accessible by any number of remotely located entities. The system may be configured in such a 
way that a plurality of third party organizations are hosted on the same networked server, with 
each potentially having access to the other's information. In situations where this type of access 
is not desirable, the system described herein may be modified to provide the necessary security. 

According to the method and system described herein, entries currently in the address 
directory may be modified to include an additional field. Typically, each entry in the directory 
will include its own form which presents a listing of the descriptive information for the person or 
group. According to the invention described herein each form may be further modified to 
include an additional field which is computed, and hidden except when open for editing. An 
example screen display 40 which includes a person form with the additional field 42 is disclosed 
in Fig. 3. The value of the field 42 would be set by a formula which creates a wild card entry 
from the hierarchal portion of a user name. In the situation where the person form is being 
employed, the formula is: 

@Name([CanonicaIize];"*/"+@Name([HierarchyOnly];Fullname)) 

The readers field 42 allows multiple values to accommodate possible multiple values in 
the FullName field of the person document. If an entry in the FuUName field is non hierarchal 
the [canonicalize] action in the formula supplies hierarchal elements from the current user's ID, 
This is acceptable since the current user will be an administrator working interactively or the 
server operating via an agent. 
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Disclosed in Fig. 4 is a screen display 50 for a group form which further includes group 
field 52. The Group field provides the same function for a group form as the Person field 
described above. The formula for modifying the Group form is as follows: 
@Name([Canonicalize] ;"'*'/"+@Name([HierarchyOnly] ;ListOwner)) 
5 For both these formulas to work correctly it is necessary that the user name field 

(FuUName) of each person document contain a name with the user's company hierarchy, and the 
owner field (ListOwner) of each group document contain a name without user's company 
hierarchy. For example, a hierarchy may read "*/ACME/INTERACT/US." In this example it is 
seen that it could read that it's the company name, division within the company, and 
D 1 0 geographical location. When these requirements are met, the formula will populate the reader's 
K field with a wild card entry which includes the hierarchal information, 

2 In order to fiirther implement the system and method described herein, access privileges 

> to the address directory are modified such that access is substantially limited to the 
n $PeopleGroupFlat view. As such, entities accessing the system described herein will typically 

Li 1 5 not be provided the $PeopleGroupsFlat view. By limiting access in this manner the display of 
□ mail/database in server documents can be eliminated. 

In order to provide access to information in the directory, a copy of SPeopleGloupsFlat 
may be created and named something such as (Customer SPeopleGroupsFlat). This duplicate 
view includes modified selection criteria which may be defined by the following formula: 
20 (Type-'Terson" | (Type="Group" & GroupType-"0":"l")) 

In operation, when access is initially denied to the $PeopleGroupsFlat view, the Domino 
server will use any view with the alias of $PeopleGroupsFlat to which the user has access. In 
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this case it will be Customer $PeopleGroupsFlat. The selection criteria modify the view 
provided such that only entries with matching hierarchal information are displayed. 

When access is provided to the directory, the views discussed above will not be properly 
built unless there is an appropriate hierarchal name in the expected location. When creating 
5 person and group documents, the required fields must the populated with the appropriate 
hierarchal name. Disclosed in Fig. 6 is a screen display 80 which displayed when a build is 
performed. As can be seen, the User name portion includes all the necessary hierarchal 
information so that the user can be properly identified. With this additional information in place, 
this will ensure that all users from a particular organization can see a particular user's person 

10 form. When creating a group form, an entry on the owner field must contain the proper 
hierarchy for the user's company. 

Disclosed in Fig. 8 is a flow chart which describes the steps performed by a system which 
includes the modifications described herein. When an entity wishes to send an e-mail, initially, a 
connection is established over the data network with the Domino server using a web-browser. 

15 As part of the connection to the system, an entry for the entity in the database may be identified 
and the person or group form accessed in order to retrieve the authorizations which the entity has 
for using the e-mail system. 

Once this information is retrieved, a query is made as to whether the entity has access to 
the ($PeopleGroupsFlat), As was described above in discussing the configuration of the system, 

20 most parties will denied access to this view. As such, the system will then seek out any view 
with an alias of SPeopleGroupsFlat to which the user has access. Once the (Customer 
SPeopleGroupsFlat) view is located, the selection criteria or the particular view are employed to 
filter through only those entries in the directory which match the hierarchal information of the 
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entity that has estabUshed the connection. A view is then built including only this information 
and presented to the entity as an html page accessible by a web browser. 

The foregoing description of the present invention has been presented for purposes of 
illustration and description. Furthermore, the description is not intended to limit the invention to 
the form disclosed herein. Consequently, variations and modifications commensurate with the 
above teachings, and the skill or knowledge of the relevant art, are within the scope of the 
present invention. The embodiments described hereinabove are further intended to explain best 
modes known for practicing the invention and to enable others skilled in the art to utilize the 
invention in such, or other, embodiments and with various modifications required by the 
particular applications or uses of the present invention. It is intended that the appended claims 
be construed to include alternative embodiments to the extent permitted by the prior art. 
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